Merge branch 'devel' of github.com:Checkmk/ansible-collection-checkmk…

….general into devel
Checkmk · Jul 28, 2023 · 23b0b9f · 23b0b9f
2 parents 0d50975 + e301909
commit 23b0b9f
Show file tree

Hide file tree

Showing 8 changed files with 331 additions and 1 deletion.
diff --git a/.github/workflows/ans-int-test-bakery.yaml b/.github/workflows/ans-int-test-bakery.yaml
@@ -0,0 +1,68 @@
+# https://github.com/ansible-collections/collection_template/blob/main/.github/workflows/ansible-test.yml
+
+name: Ansible Integration Tests for Bakery Module
+on:
+  workflow_dispatch:
+  pull_request:
+    branches:
+      - main
+      - devel
+      - feature-int-test-bakery
+    paths:
+      - 'plugins/modules/bakery.py'
+
+env:
+  NAMESPACE: checkmk
+  COLLECTION_NAME: general
+
+jobs:
+
+###
+# Integration tests (RECOMMENDED)
+#
+# https://docs.ansible.com/ansible/latest/dev_guide/testing_integration.html
+
+  integration:
+    runs-on: ubuntu-latest
+    name: Ⓐ${{ matrix.ansible }}+py${{ matrix.python }}
+    strategy:
+      fail-fast: false
+      matrix:
+        ansible:
+          - stable-2.13
+          - stable-2.14
+          - stable-2.15
+          - devel
+        python:
+          - '3.8'
+          - '3.9'
+          - '3.10'
+          - '3.11'
+        exclude:
+          # Exclude unsupported sets.
+          - ansible: stable-2.13
+            python: '3.11'
+
+    steps:
+      - name: Check out code
+        uses: actions/checkout@v3
+        with:
+          path: ansible_collections/${{env.NAMESPACE}}/${{env.COLLECTION_NAME}}
+
+      - name: Set up Python
+        uses: actions/setup-python@v4
+        with:
+          python-version: '3.10'
+
+      - name: Install ansible-base (${{ matrix.ansible }})
+        run: pip install https://github.com/ansible/ansible/archive/${{ matrix.ansible }}.tar.gz --disable-pip-version-check
+
+      - name: Provide secrets file
+        run: echo "${{ secrets.CHECKMK_DOWNLOAD_PW }}" > ./tests/integration/files/.dl-secret
+        working-directory: ./ansible_collections/${{env.NAMESPACE}}/${{env.COLLECTION_NAME}}
+        env:
+          CHECKMK_DOWNLOAD_PW: ${{ secrets.CHECKMK_DOWNLOAD_PW }}
+
+      - name: Run integration test
+        run: ansible-test integration bakery -v --color --retry-on-error --continue-on-error --diff --python ${{ matrix.python }} --docker
+        working-directory: ./ansible_collections/${{env.NAMESPACE}}/${{env.COLLECTION_NAME}}
diff --git a/README.md b/README.md
@@ -57,7 +57,7 @@ Name | Description
 Name | Description | Tests
 --- | --- | ---
 [checkmk.general.activation](https://github.com/Checkmk/ansible-collection-checkmk.general/blob/main/plugins/modules/activation.py)|Activate changes.|[![Integration Tests for Activation Module](https://github.com/Checkmk/ansible-collection-checkmk.general/actions/workflows/ans-int-test-activation.yaml/badge.svg)](https://github.com/Checkmk/ansible-collection-checkmk.general/actions/workflows/ans-int-test-activation.yaml)
-[checkmk.general.bakery](https://github.com/Checkmk/ansible-collection-checkmk.general/blob/main/plugins/modules/bakery.py)|Activate changes.|[![Integration Tests for Bakery Module](https://github.com/Checkmk/ansible-collection-checkmk.general/actions/workflows/ans-int-test-bakery.yaml/badge.svg)](https://github.com/Checkmk/ansible-collection-checkmk.general/actions/workflows/ans-int-test-bakery.yaml)
+[checkmk.general.bakery](https://github.com/Checkmk/ansible-collection-checkmk.general/blob/main/plugins/modules/bakery.py)|Bake and sign agents.|[![Integration Tests for Bakery Module](https://github.com/Checkmk/ansible-collection-checkmk.general/actions/workflows/ans-int-test-bakery.yaml/badge.svg)](https://github.com/Checkmk/ansible-collection-checkmk.general/actions/workflows/ans-int-test-bakery.yaml)
 [checkmk.general.contact_group](https://github.com/Checkmk/ansible-collection-checkmk.general/blob/main/plugins/modules/contact_group.py)|Manage contact groups.|[![Integration Tests for Contact Group Module](https://github.com/Checkmk/ansible-collection-checkmk.general/actions/workflows/ans-int-test-contact_group.yaml/badge.svg)](https://github.com/Checkmk/ansible-collection-checkmk.general/actions/workflows/ans-int-test-contact_group.yaml)
 [checkmk.general.discovery](https://github.com/Checkmk/ansible-collection-checkmk.general/blob/main/plugins/modules/discovery.py)|Discover services on hosts.|[![Integration Tests for Discovery Module](https://github.com/Checkmk/ansible-collection-checkmk.general/actions/workflows/ans-int-test-discovery.yaml/badge.svg)](https://github.com/Checkmk/ansible-collection-checkmk.general/actions/workflows/ans-int-test-discovery.yaml)
 [checkmk.general.downtime](https://github.com/Checkmk/ansible-collection-checkmk.general/blob/main/plugins/modules/downtime.py)|Manage downtimes.|[![Integration Tests for Downtime Module](https://github.com/Checkmk/ansible-collection-checkmk.general/actions/workflows/ans-int-test-downtime.yaml/badge.svg)](https://github.com/Checkmk/ansible-collection-checkmk.general/actions/workflows/ans-int-test-downtime.yaml)

diff --git a/tests/integration/files/README.md b/tests/integration/files/README.md
@@ -0,0 +1,5 @@
+# Files
+This folder is currently used to provide files to the `ansible-test` container
+on GitHub Action execution. Primarily this currently concerns secrets for which
+there is no other way of providing them to the container.  
+**Please do not store anything in here unless you know, what you are doing!**
diff --git a/tests/integration/targets/bakery/files/agent_signature_keys.mk b/tests/integration/targets/bakery/files/agent_signature_keys.mk
@@ -0,0 +1,91 @@
+# Written by Checkmk store (actually Ansible)
+
+agent_signature_keys.update({1: {'alias': 'test_key',
+     'certificate': '-----BEGIN CERTIFICATE-----\n'
+                    'MIIFUzCCAzugAwIBAgIUH/fvbU7RLhm6METjrUvx/Xhr4cMwDQYJKoZIhvcNAQEN\n'
+                    'BQAwQzERMA8GA1UEAwwIdGVzdF9rZXkxGzAZBgNVBAoMEkNoZWNrbWsgU2l0ZSBs\n'
+                    'b2NhbDERMA8GA1UECwwIY21rYWRtaW4wHhcNMjMwNTE2MTI1MzUyWhcNMjUwNTE2\n'
+                    'MTI1MzUyWjBDMREwDwYDVQQDDAh0ZXN0X2tleTEbMBkGA1UECgwSQ2hlY2ttayBT\n'
+                    'aXRlIGxvY2FsMREwDwYDVQQLDAhjbWthZG1pbjCCAiIwDQYJKoZIhvcNAQEBBQAD\n'
+                    'ggIPADCCAgoCggIBAKxdBrzxkAeUGBDjio6l2q9Q1NhK8xWAnH/Lo+eIDWu3Gy8j\n'
+                    'Wnlnfj2He5uWHZ1aIE90sGDZbd51G75Uc0UM2APkhq6iOVn8VZdxIJ5fUsfB1NMM\n'
+                    'qizaiLIe5Yl9lQD1ffYRrOWF2cPg0rifEZtqawB2umTiRMlATG8PNAsF2coTuYzh\n'
+                    'iNVJUySYT256MKN6ybut5AWaHO+Oka5IknknW4q7dNjStxIgi7BybunTGzvKCjY6\n'
+                    'LRKMQtxvhu3pxgmwJ8J20gbuXs+pt7isMzvGrBGavvCHMgNZfGeLlGvnx5ScvrOO\n'
+                    'AFpbeQd4fVbs0Vi31v1V3ufpazA/D//Y3K7byUUGB5dg1mBM4AMW1y0Q+Mk9LQYD\n'
+                    'gHRJ5THwFdx8+NkeoIX9PDVGUxVsiNwJ6wp1rCJ7T+J351svGvKuY7nZflwfxRzQ\n'
+                    'j549ZUJG3SMAeh6lSmPXNgMK5gIpKSXNukxaB6gepsGtDpdMHxlR4ulnUGs/29u/\n'
+                    'Qh7YCabrzJRsdys/MiwnDLJCPlVwnb2tZTVwZMekCL16hQEbWGPA5AvKbaM8KyaL\n'
+                    '/rV7jQaZESgvfFBxsoFq1ZKIvX9Q/pJvM9DgU1vjIV0E5b9zbk4mdbEBJ+oArV+0\n'
+                    'jrCVJZilfLF0xxQZ7kP9SCi2u3s+sc9BNlyehae3ykkz267LkyGc6QyfFws9AgMB\n'
+                    'AAGjPzA9MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFCa8C1f2XP3tRnmbFB4AUB2G\n'
+                    '88BrMA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0BAQ0FAAOCAgEAWlBudYWDj9+q\n'
+                    'qsERE3DL7yKSKVE5sJbSCkJ4ZxUtuCI6tXe+vykBTh4c++uizen6vX8NG9WnuGDx\n'
+                    'Wo1zjHuiQCduorMMuwKnqV+VUgnSk6BF6YnUxE4rnw9t6Rp+GK+2FDYTAi6CXx/v\n'
+                    'hzxxSefdx67J5hLpLtgCFcwLJe+uf26OvQNTMmgiHDHas07cNKh6At68DCZNmkau\n'
+                    'PETrrwCHVt75OopAfydejp+u0j/nig3/lyflpDKxjXh6h4uhoGRa4QFQUETyYYrw\n'
+                    'sgalhk1SopLL65uP0KxZjEkbVBhuIX/x5lCGtuNJt9cFLFACkkjvLEw1+5GtNTNk\n'
+                    '7rBr5Q+P5lqbsIqckcms2Pecqy/KmF1+FY1f5TnfrlyQ/6I1/XyYaWJ8Bwz60uDN\n'
+                    'deB0xq8Sikd5SkluhvmCl/FDu2T50fu5wAQ2Y/XHub1hdKCjbcRnw+1i3eUu7hso\n'
+                    'KiVKYDNMzCAl1q0RPHHlUFfAx0uFBINRR6sGuu44CxLPTKPpXj+BZLWD9buPi8U6\n'
+                    'vCYuRvdM6AvKJFuFo39CBDRwVFXyPYKgD8HWKczkrjIgvhrOk7pw2hGhmg1h5Bib\n'
+                    'e23QLEM4wvLRvK4QWzAcJSTahuQVtiX6+Lt7g82aGm2oZXC1TeWPbsJD+od4D3yG\n'
+                    'IcHJbqKvCxWBU+JbVqWifkxhiEX0kEM=\n'
+                    '-----END CERTIFICATE-----\n',
+     'date': 1684241632.3241942,
+     'not_downloaded': True,
+     'owner': 'cmkadmin',
+     'private_key': '-----BEGIN ENCRYPTED PRIVATE KEY-----\n'
+                    'MIIJrTBXBgkqhkiG9w0BBQ0wSjApBgkqhkiG9w0BBQwwHAQItIV9A8Gte68CAggA\n'
+                    'MAwGCCqGSIb3DQIJBQAwHQYJYIZIAWUDBAEqBBBJRHrWeaU57vPhRR2X/vBhBIIJ\n'
+                    'UCZbfLTKnffrE33AxBlOesWTBGjABZXB4vGGQGHqPvUyvf7FsP0kyiOnjN0hf3vw\n'
+                    'Cdm/qhm0iN74iKaKAhsk87ZjBVs6Y3DhxtOQRxuWKmZieJcrsMBfDMKVl/jQ/3g0\n'
+                    'vg1Ac92atqmZLqNZWS5AMP7wTM/4crVYOVrgoE1FoNuX1Ik0Ku/E9HKEliH7jURY\n'
+                    'x4zLvYpL8sS8lRT7B9jTEP0HOrMI9QCq8ddzSfztsz4ou6z0thpHfZ2M4pE9QTOO\n'
+                    'dhC247QqhzhQRObSB58tse5SrONhue58VNnn2NFfNIxuhYRf8sqgVS0sl5TL2SIM\n'
+                    'zG3pdNNksxZk5tVNe48t3VRFkBYZUckCxdGa+3iKsyFwZJD/FOIgUrEoFKkl6CLA\n'
+                    'Guq8qn4r3UluvFAnGgbMKcSD943VKQdvrwP9gqjJG8f76qbCF5Rl9jeDDbPLs1Fg\n'
+                    'fVRxj5fA/vt3byUi9dn890EdYEHxt8RacUDkGe6IytZu8IndO9uE6pxyijJWZbLW\n'
+                    'wr4j6z1EcCoVnqgpok2MZMo0OQ5Srs9yzfottp3P+WILsZA2cgCFcuGjBYo0hrqh\n'
+                    '0woORtVHusZsQdt6fkg/tWfaqcPrA6GKHn86YIfBG64pinnINCSAtAOju8lA6VH/\n'
+                    'gb4KID2TpebZWiV24S57km5qGFwKFkf/6oq+UEfZc2cIuIMUq30oZR8WngNN3NUz\n'
+                    'EMKHrtd1RudBffsTcihQhQqnbvStgdRl9gFgzlgx4VahUtKRQJd+fmqfIqJ5SEZG\n'
+                    'eiwoKyUPPHkaIzuijkblG3Yvow4Vxh6UIJENX2w7Po5oGlCU0TLakXevSqDIL0+l\n'
+                    'Bu8iYI63vEEd5WRiihfLg1kq/A4QxY1uX8iOP1Y/QacsW8R8a7mMp77rY4pjGrHs\n'
+                    'GKXjQJF8T3DiGdIXTGaWjgzcEvb2n8vneNJQQQ1blRcvX0Ua63jMKOxC/E0E/cxa\n'
+                    'UD7iXxHE3omeWQ7l/5rOO6eXltIDC74aYaJrJUolOxQo3hKPIKv2qshrE4rlmJSN\n'
+                    '/nlzB8tD/KgX8p7j8dRvjOQum3VKiE9ZRsP3egty8kl+9Qgr0hXaRqPjQdmCi2UI\n'
+                    'dy2cYnyFLMt8PfWUeBb1dBmudxAVYGn7pz7VKpy2K4CKO8alR5gC+YRBGSzy8qPE\n'
+                    'yKL/gR1olnsr9Fb4GaBb0oPR/ndFHOs44v+wGt7yRM2LPwZpf/YU32CKD+Cq4K3J\n'
+                    '/Y3Ug1vOE1D37YC9AMgwore0hXByxiGsI0eG06SJur+fF6xtzUsnT1ApPj6CHkQM\n'
+                    'dL1ZNMjsp0JpnRa9MywcUzJkUEGPx/BTRvJp3EdzFj6HKUQVB/4+N/5zPxMRa3sJ\n'
+                    'XXGL8/xHuAyQVVAdeKtCrJWZBLKiz0WCaoWTMkCZwRPmoEbswlgc4XHcLwCW7WOm\n'
+                    '5ypo4coVaXLCLIiOBHeMSJfZBq+DkZoztSzUtEXKn1vurmggUk5s/XaQsrh94jKN\n'
+                    'o5qDQWCJigctQrljNj5WNxpc++ux7qj9qC8Y1GSEhuWeigSevdB8JA4vaZH4kXnQ\n'
+                    'zX9+3crSvsvEddmtW3GCwC08xp4mdxjEFJjQ6+L5gf9pJg8aqT9Wd/6pHtt7zS/C\n'
+                    'OpaSnAz5pCFXA5Ip1WsxnrQwqMwU1iilIAWtKFcokwhUpLqtnd8qMOoCq+t2MiZq\n'
+                    'VwQEeRJEJ8tKQjtEibwUIkZuBA4lQ9tFHBychlFsa93o2Glxtit8VFtssBK4sG4M\n'
+                    'J5Wdwd6/6j27r2sKDnfqX68n56w8hqAlixV+74oTC9kEK/S9ROCExGNxBFHbxvW1\n'
+                    'B56YBj4rbP6cyxq+mVmaddcB0oD3KZXx5xMU8AojyGiy0bhBqj4qmLDxO58tH6g4\n'
+                    'e5vAeYcuaknSUTSkzbVgzcsn4d+iUxWJNouvsF1xT0+UDqT+Wf662cKqHCZwdfJU\n'
+                    's8c2bgrg0P9W2T3tZ7xwkIcvBOPNDQZu32gO45ye3Ui8/9fp7Mw/81HEOBfeyNT6\n'
+                    'SNSs6ZLVsfWxGClgzlEJP6Ul21VIY3lw6CkKDOzlJjSMkRBoFWz0Ffqwkz9wsJOe\n'
+                    '9y+gEQIoBJwAUeIgOLyBq1bTYiis9TAePxpS4sh4H+ZNYrzMaDD+fTRkC1+dt17I\n'
+                    'U+4OWZMOLB1sbonkfHM4yaBt8kjasUjorVuFTNmhHb4FDQgYvHpabM/lNJoz4EG1\n'
+                    'cUnOk5YEj16XKIP3ICvkbopryhXgVlwPGfHJPgiicDA/Gs1hdusYz3Vfu1hu7MJ8\n'
+                    'LQwrkDjfG0aS7efiMwMdrQA/JD3NbubvDzVSRmTfNbkU2NEcrXXADCkr9KBTDor+\n'
+                    'xJGi/I2h7JBWQC88+VqzlivCZF+1ZLeZgtu3Sd1UtEHoXh+czfbMvW+HhRHFERim\n'
+                    'CEu9kWAmejzNAUL3XpQqTXSCdW7igiHUau3F7UtY0SuAGOGebC0xhZQOUlAVxyq1\n'
+                    'mbnSSv+MaKTKakYcmfK2djm+MVooL+GUkkFaDJDcP3NU9sSjt3whIvjxJG/JK001\n'
+                    'KtDDdMzKDvO+GDjFCrzm7eeEFu8tpj0I/VN72VT3EtR5yN36xOSbaxI3TvS++htU\n'
+                    'i3DzBxQ97h+CT8C9inCX+qYolBU6oV8b24BQIbNlcWmkci8xclg3SdUTbmPle0rd\n'
+                    '3uHBfW8lKLc4FQalBIXeADfDH0XV3FU7WOVevcTQusWQr5S3F8dV6KLyIdsvHNRv\n'
+                    'apOaxqo7VaetBdifqls6/+RuSvKgdNZNpb24bJpJrwJ7ctkHyVDsh2+R92+HKQ6U\n'
+                    '+7zNeT8n5+IHTRJfWDApvgtDr318COUYO/8rRNvM8hQW5tC/Umods0ZZTlv71fkY\n'
+                    'D73bZmoBQVwq9wEUJXymCSxwKBvIMWGdA4DrHtwAQ0buxCpktajhLzPAmbXos9Z7\n'
+                    '6LJpC+aCcLO2cYNgZtGqiGhuG0WuquHWh4/76AJ58GoFBJstjMDYrwtHBfa/ciXj\n'
+                    '4GetbLsfvFyg1+S+Fx7UBki5h1sTxWo5FvCiHazK02ARkSuj0nZp2HS+U7tEQr69\n'
+                    'he9dEqeQiazhOC8PIIBeWEIc2AumbBsHkyrLaYoKxuCLj45NypGfFmCNzdB1IlU0\n'
+                    'M3AeIoaCIqYApn/3yjwbJ3fw7sLPmXe+072ZS+MkDHjQz1B/fZtVvPgDH1xncmsP\n'
+                    'jVEOrjjEvPgjxh5qTKcnRk7IDrVphN+yueD+C3RhE8Hb\n'
+                    '-----END ENCRYPTED PRIVATE KEY-----\n'}})
diff --git a/tests/integration/targets/bakery/tasks/main.yml b/tests/integration/targets/bakery/tasks/main.yml
@@ -0,0 +1,15 @@
+---
+- name: "Run preparations."
+  ansible.builtin.include_tasks: prep.yml
+
+- name: "Wait for site to be ready."
+  ansible.builtin.pause:
+    seconds: 5
+  when: "'OVERALL 1' in item.stdout_lines"
+  loop: "{{ site_status.results }}"
+
+- name: "Testing."
+  ansible.builtin.include_tasks: test.yml
+  loop: "{{ checkmk_versions }}"
+  loop_control:
+    loop_var: outer_item
diff --git a/tests/integration/targets/bakery/tasks/prep.yml b/tests/integration/targets/bakery/tasks/prep.yml
@@ -0,0 +1,36 @@
+---
+- name: "Download Checkmk Versions."
+  ansible.builtin.get_url:
+    url: "{{ download_url }}"
+    url_username: " {{ download_user }}"
+    url_password: "{{ download_pw }}"
+    dest: /tmp/checkmk-server-{{ item.site }}.deb
+    mode: "0640"
+  loop: "{{ checkmk_versions }}"
+
+- name: "Install Checkmk Versions."
+  ansible.builtin.apt:
+    deb: /tmp/checkmk-server-{{ item.site }}.deb
+    state: present
+  loop: "{{ checkmk_versions }}"
+
+- name: "Create Sites."
+  ansible.builtin.command: "omd create --no-tmpfs --admin-password {{ automation_secret }} {{ item.site }}"
+  args:
+    creates: "/omd/sites/{{ item.site }}"
+  loop: "{{ checkmk_versions }}"
+
+- name: "Start Sites."
+  ansible.builtin.shell: "omd status -b {{ item.site }} || omd start {{ item.site }}"
+  register: site_status
+  changed_when: site_status.rc == "0"
+  loop: "{{ checkmk_versions }}"
+
+- name: "Inject a Key into the Sites."  # This is a hack and should never be done in production!
+  ansible.builtin.copy:
+    src: agent_signature_keys.mk
+    dest: "/omd/sites/{{ item.site }}/etc/check_mk/multisite.d/wato/agent_signature_keys.mk"
+    owner: "{{ item.site }}"
+    group: "{{ item.site }}"
+    mode: "0660"
+  loop: "{{ checkmk_versions }}"
diff --git a/tests/integration/targets/bakery/tasks/test.yml b/tests/integration/targets/bakery/tasks/test.yml
@@ -0,0 +1,86 @@
+---
+- name: "{{ outer_item.version }} - Create hosts."
+  host:
+    server_url: "{{ server_url }}"
+    site: "{{ outer_item.site }}"
+    automation_user: "{{ automation_user }}"
+    automation_secret: "{{ automation_secret }}"
+    name: "{{ item.name }}"
+    folder: "{{ item.folder }}"
+    attributes:
+      site: "{{ outer_item.site }}"
+      ipaddress: 127.0.0.1
+    state: "present"
+  delegate_to: localhost
+  run_once: true  # noqa run-once[task]
+  loop: "{{ checkmk_hosts }}"
+
+- name: "{{ outer_item.version }} - Activate."
+  activation:
+    server_url: "{{ server_url }}"
+    site: "{{ outer_item.site }}"
+    automation_user: "{{ automation_user }}"
+    automation_secret: "{{ automation_secret }}"
+    force_foreign_changes: true
+    sites:
+      - "{{ outer_item.site }}"
+  delegate_to: localhost
+  run_once: true  # noqa run-once[task]
+
+- name: "{{ outer_item.version }} - Bake all agents."
+  bakery:
+    server_url: "{{ server_url }}"
+    site: "{{ outer_item.site }}"
+    automation_user: "{{ automation_user }}"
+    automation_secret: "{{ automation_secret }}"
+    state: "baked"
+  delegate_to: localhost
+  run_once: true  # noqa run-once[task]
+
+- name: "{{ outer_item.version }} - Sign all agents."
+  bakery:
+    server_url: "{{ server_url }}"
+    site: "{{ outer_item.site }}"
+    automation_user: "{{ automation_user }}"
+    automation_secret: "{{ automation_secret }}"
+    signature_key_id: "{{ signature_key_id }}"
+    signature_key_passphrase: "{{ signature_key_passphrase }}"
+    state: "signed"
+  delegate_to: localhost
+  run_once: true  # noqa run-once[task]
+
+- name: "{{ outer_item.version }} - Bake and Sign all agents."
+  bakery:
+    server_url: "{{ server_url }}"
+    site: "{{ outer_item.site }}"
+    automation_user: "{{ automation_user }}"
+    automation_secret: "{{ automation_secret }}"
+    signature_key_id: "{{ signature_key_id }}"
+    signature_key_passphrase: "{{ signature_key_passphrase }}"
+    state: "baked_signed"
+  delegate_to: localhost
+  run_once: true  # noqa run-once[task]
+
+- name: "{{ outer_item.version }} - Delete hosts."
+  host:
+    server_url: "{{ server_url }}"
+    site: "{{ outer_item.site }}"
+    automation_user: "{{ automation_user }}"
+    automation_secret: "{{ automation_secret }}"
+    name: "{{ item.name }}"
+    folder: "{{ item.folder }}"
+    state: "absent"
+  delegate_to: localhost
+  run_once: true  # noqa run-once[task]
+  loop: "{{ checkmk_hosts }}"
+
+- name: "{{ outer_item.version }} - Activate."
+  activation:
+    server_url: "{{ server_url }}"
+    site: "{{ outer_item.site }}"
+    automation_user: "{{ automation_user }}"
+    automation_secret: "{{ automation_secret }}"
+    sites:
+      - "{{ outer_item.site }}"
+  delegate_to: localhost
+  run_once: true  # noqa run-once[task]
diff --git a/tests/integration/targets/bakery/vars/main.yml b/tests/integration/targets/bakery/vars/main.yml
@@ -0,0 +1,29 @@
+---
+checkmk_versions:
+  - version: "2.2.0p7"
+    site: "beta"
+  - version: "2.1.0p30"
+    site: "stable"
+  - version: "2.0.0p37"
+    site: "oldstable"
+download_url: "https://download.checkmk.com/checkmk/{{ item.version }}/check-mk-enterprise-{{ item.version }}_0.{{ ansible_distribution_release }}_amd64.deb"
+download_user: "d-gh-ansible-dl"
+# This is a hacky approach, but there is no better way currently. This has been confirmed by the Ansible project.
+download_pw: "{{ lookup('ansible.builtin.file', '/root/ansible_collections/checkmk/general/tests/integration/files/.dl-secret') }}"
+server_url: "http://127.0.0.1/"
+automation_user: "cmkadmin"
+automation_secret: "d7589df1-01db-4eda-9858-dbcff8d0c361"
+signature_key_id: 1
+signature_key_passphrase: "{{ automation_secret }}"
+
+checkmk_hosts:
+  - name: test1.tld
+    folder: "/"
+  - name: test2.tld
+    folder: "/"
+  - name: test3.tld
+    folder: "/"
+  - name: test4.tld
+    folder: "/"
+  - name: test5.tld
+    folder: "/"